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Description 



The invention relates to an on-line diagnostic system for a seating oil system associated with a gas- 
5 cooled electric generator. 

Modem electric generators such as those driven by steam turbines have the capacity to generate 
currents of thousands of amperes in their stator windings. Such anrangement also generates a large 
amount of unwanted heat due to stator and rotor winding resistance as well as windage losses. Accord- 
ingly, a cooling system must be provided in order to remove the heat resulting from the electrical and 
10 windage losses during normal operation. 

One type of cooling system utilizes a flow of cooling gas, such as hydrogen, within the generator hous- 
ing as well as within the rotor and stator structures to remove the produced heat. 

The hydrogen cooling atmosphere must remain within the generator housing, and since the rotor shaft 
ends of the generator extend through the gas tigirt enclosure, provisions are made to prevent the es- 
15 cape of gas along the shaft To this end, shaft seals, known as gland seals are provided. An auxiliary 
sealing oil system supplies the gland seals with oil under pressure to prevent the escape of hydrogen 
gas from the generator as well as to provide lubrication to the gland seals. 

The sealing oil system Includes sealing oil pumps, coolers, filters and a multitude of valves and moni- 
toring devices such as gauges and alarm switches. Proper operation of the sealing oil system is main- 
20 tained by an operator's visual inspection of the gauges. Audible alarms are provided for critical func- 
tions such as low sealing oil pressure or abnonnal oil levels. 

An abnonnal gauge reading may occur at a time when the operator is not monitoring the gauges and an 
alarm signal may not indicate the basic problem leading up to the alarm. The present invention provides 
for on-line continuous monitoring of the sealing oil system and can indicate to an operator possible ab- 
25 normal conditions which may be developing so that corrective action, if any, may be taken at the incipient 
stage of a possible malfunction. 

The principal object of this Invention Is to provide an improved on-line diagnostic system for determin- 
ing the operating status of a gas-cooled electric generator. 
The invention in its broad form resides in a diagnostic apparatus for a multi-component gas-cooled 
30 electric generator seal oil system wherein the generator shaft is sealed against the escape of the cool- 
ing gas by means of spaced-apart gland seals and wherein sealing oil is supplied to the gland seals, of 
the type comprising: a plurality of sensors connected to sense predetermined operating parameters of 
said seal oil system, while on-line, and to provide respective corresponding ou^ut signals; character- 
ized by: computer means Including a rule base memory for diagnosing the on-line operating condition of 
35 said seal oil system; said rule base Including rules linking a preceding evidence node with a consequent 
hypothesis node; a plurality of said evidence nodes constituting sensor nodes; said apparatus including 
means for inputting said on-line sensor signals into said sensor nodes; means for additionally inputting 
operator generated values into selected ones of said sensor nodes. 
The preferred embodiment of the invention will be described, by way of example, with respect to the ao- 
40 companying drawings in which: 

Figure 1 is a simplified block diagram of a turbine-driven electric generator together with various moni- 
toring and diagnostic systems; 

Rg. 2 is a simplified layout of one type of sealing oil system; 
45 Rg. 3 is a cross-sectional view of a typical gland seal ring used in the sealing oil system; 

Rgs. 4 and 5 illustrate nodal diagrams utilized to explain one type of expert system which may be uti- 
lized in the operation of the present invention; 

Rgs. 6A and 6B sen^e to illustrate typical functions which may be utilized in the expert system; and 

Rgs. 7 to 1 7 are rule base flow diagrams illustrating operation of the present Invention. 

50 

Rgure 1 illustrates an electric generator 10 supplied with DC excitation cunrent from exciter 12 and 
driven by a prime mover such as a steam turt)lne 14. 

The generator is of the gas-cooled variety, hydrogen t>eing a prime example, and accordingly a hydro- 
gen auxiliary system 16 is provided for Initial charging as well as subsequent make up of hydrogen and 
55 for maintaining and monitoring the hydrogen atmosphere in accordance with predetermined dryness, 
pressure and purity values. 

When the generator 10 is not operating, but is filled with gas, or during normal operation with shaft 18 
rotating, a sealing oil system 20 provides oil under pressure to the gland seals to help keep gas from es- 
caping from the generator and to lubricate the gland seals. 
60 In accordance with tiie present invention, the operation of the sealing oil system Is automatically moni- 
tored on-line. The operating condition of the sealing oil system is thus provided to an operator who can 
iniatate connective action if the results of the diagnosis Indicate the occun-ence of one or more abnormal 
conditions. The diagnosis is perfonned by a diagnostic computer 22 which is provided with various sen- 
sor output readings from the operating system, in one embodiment, if the diagnostic computer 22 Is at a 
65 location remote from the turbine generator power plant, the data gathered by the various sensors may 
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be first supplied to a data center 24 for subsequent transmission to diagnostic computer 22, sudi as de- 
scribed in U.S. Patent No. 4,517,468. 

In addition to sensor infomnation from the liydrogen and sealing oil systems 16 and 20, an indication of 
turbine generator rotational speed may be provided by means of an RPM sensor arrangement 26. Oper- 
5 ator-entered information may be placed into the data center by means of a keyboard 28 and an interac- 
tive display 30 allows for the display of local data as well as information transmitted back by the diagnos- 
tic computer 22. A display 32 at the remote location may Include both visual and hard-copy records of 
the results of the diagnosis. 

Although the diagnosis is applicable to a variety of different sealing oil systems, it will be described by 
10 way of example with respect to a sealing oil system wherein sealing oil is supplied to two axially displaced 
annular grooves In the gland seal, with the inner, or hydrogen side groove and the outer, or air side 
groove being provided with sealing oil from two respective separate suppy systems. One such arrange- 
ment Is illustrated In Rg. 2. 

15 Rq.2 

Fig. 2 is a simplified representation of a sealing oil system of the type described, and for clarity, 
various isolation, throttle, pressure relief and bleed valves have been omitted from the drawing. 
Generator rotor 40 is illustrated together with shaft 41, the left side of which is supported in a bearirig 
20 42e (e » exciter end) and the right side of which is supported in bearing 42t (t » turbine end). The shaft is 
sunrounded by respective gland seals 44e and 44t each of which includes a respective inner or hydro- 
gen side circumferential groove 46e and 46t, as well as an outer or air side circumferantial groove 47e 
and47t. 

Sealing oil is supplied to the hydrogen side grooves 46e and 46t by means of a supply pump 50h (h s 
25 hydrogen side) while the air side circumferential grooves 47e and 47t are supplied with sealing oil from 
pump 50a (a » air side) having a normally off backup pump 50a' in parallel therewith. 

The temperature of the oil supplied by pump 50h is controlled by means of cooler 54h having external 
water circulating Input and output lines 55h and 58h. The cool oil is then passed through a filter 58h and a 
check valve 234 prior to delivery to the gland seals. In a similar manner, the air side arrangement in- 
30 dudes cooler 54a and filter 58a. 

Hydrogen side sealing oil from the gland seals is discharged into respective defoaming tanks 60e and 
60t, while the air side discharge is collected in a combined bearing oil and sealing oil drain 62e and 62t. 

The hydrogen side sealing oil is maintained at a certain level within the defoaming tanks where most of 
the hydrogen entrained in the oil is removed and retumed to the environment of the generator (the cas- 
35 ing of which is not illustrated). Both defoaming tanks drain to. a drain regulator 64 and then to the input 
side of pump 50h. The drain regulator maintains the proper amount of oil in the hydrogen side of the seal 
oil system. 

Oil from drains 62e and 62t is combined and provided to the input side of pump 50a after passage 
through a loop seal and vapor extraction assembly 66 which continuously vents any hydrogen In the line 
40 to the atmosphere. 

Normal sealing oil pressure is, for example, 12 psi higher than the gas presure. If the air side pump 50a 
should stop, or if the sealing oil pressure at the gland seals should decrease to a predetermined value, 
for example, 8 psi above the hydrogen pressure, a backup oil supply 70 will be put into operation to pro- 
vide the necessary oil pressure for the seals. 
45 As long as the oil pressure in the circumferentai grooves exceeds the hydrogen pressure in the gen- 
erator, sealing oil will flow Inward rather than pennitting hydrogen to escape outward. When the oil pres- 
sures at the hydrogen side/air side interface on the shaft are equal, there will be no flow of oil in the 
clearance space between the two circumferential grooves. 

50 Ra.3 

For example, and with additional reference to Rg. 3, there is illustrated, in somewhat more detail, a typ- 
ical gland seal 44e. The gland seal includes a gland seal ring 80 having passages which terminate in cir- 
cumferential grooves 46e and 47e. For some units the gland seal ring may be comprised of two distinct 

55 side by side structures, one for the hydrogen side and the other for the air side. As indicated by arrows 
82, hydrogen side sealing oil is provided through passageways to groove 46e while arrows 83 indicate 
the passageway flow of air side oil to groove 47e. Oil supplied by the air side of the sealing oil system 
flows outwardly along shaft 41 toward the bearing (not Illustrated in Fig. 3). This helps to prevent release 
of absorbed air or moisture into the generator. Oil supplied by the hydrogen side of the system flows In- 

60 wardly along the shaft toward the Inside of the generator to help keep the air side sealing oil from con- 
tacting the hydrogen and to assist in preventing the escape of absorbed hydrogen to the outside atmo- 
sphere. Although there Is some oil flow from each groove toward the other, the oil pressures are proper- 
ly balanced and there is no interchange of oil supplies in the clearance space between the two 
circumferential grooves. As indicated on the Rgure, the air side sealing oil drains back to the bearing 

65 drain 62e and oil from the hydrogen side of the gland seal ring drains to the defoaming tank 60e. 
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The surface of the seal ring adjacent the shaft 41 includes three babbits of a soft material which helps 
prevent damage to the shaft if sealing oil is lost Babbit 85 is associated with the air side of the seal ring 
and babbit 86 is associated with the hydrogen side. Babbit 87 is shared by both sides. 

Returning once again to Rg. 2, hydrogen side sealing oil supplied by pump 50h is provided to the gland 
seals by means of oil supply pipe 90h and the air side sealing oil from pump 50a Is provided by means of 
oil supply pipe 90a (oil supply and return pipes are shown In heavy line). In order to balance the pres- 
sures between the two systems at the gland seals, a pressure equalizing valve 210 is provided. This 
valve senses the pressure of oil supplied to the hydrogen side and air side circumferential grooves 46e 
and 47e by means of respective sensing lines 92 and 93 and throttles oil in line 90h until the pressures 
are equal. A similar pressure-equalizing valve 217 Is provided for equalizing the pressures at gland seal 
44t by virtue of sensing line connections 94 and 95. 

A float-operated drain valve 231 opens if excess oil builds up in the drain regulator 64 and releases 
the excess oil to the air side oil input of pump 50a. A float operated fill valve 232 opens up if the drain 
regulator oil level is too low, and allows make up oil from the air side pump 50a to fill the tank to the cor- 
rect level. 

During operation, the oil pressure at the gland seals is maintained at a certain value, for example 12 psi 
above the hydrogen pressure. In order to maintain this relationship in pressures, there is provided dif- 
ferential pressure bypass regulator valve 256 connected to sense the air side oil pressure by means of 
sensing line 96 and to sense the hydrogen pressure by means of sensing line 97 connected to defoaming 
tank 60e. In response to the sensed pressures, valve 256 is operable to bypass the output of pump 50a 
to maintain the established 12 psi pressure differential. As previously described, the hydrogen side oil 
pressure will also be at a value equivalent to 12 psi above the hydrogen pressure since the hydrogen 
side and air side oil pressures are equalized by operation of valves 210 and 217. 

Normally closed backup differential pressure regulator valve 264 functions to allow oil from the back- 
up supply 70 to be provided to the sealing oil system in the event of failure of pump 50a. Regulating 
valve 264 senses the pressure of the supplied air side oil by means of sense line 98 and the hydrogen 
pressure by means of sense line 99 connected to defoaming tank 60L In a typical operation, valve 264 
will open when the sealing oil pressure decreases to, for example, 8 psi above the hydrogen pressure. 

The arrangement of Fig. 2 includes a plurality of sensors and indicators utilized in the on-line diagno- 
sis of the sealing oil system. For easy reference, the sensors and indicators are set forth below In tabu- 
lar form together with their particular function. 

Pressure Sviliches 

HS063 Connected across the hydrogen side 

sealing oil pump 50h and closes when 
the differential pressure thereacross 
decreases to 5 psi. 

AS063 Connected across the air side sealing 

oil .pump 50a and closes when the 
differential pressure thereacross 
decreases to 5 psi. 

AS0B63 Connected to backup pump 50a' and 
activates when the backup pump is put 
into operation. 

S0B63 Closes wheh the pressure from the 
backup oil supply 70 decreases to a 
certain value, for example 85 psi. 

ASOH63 Connected to sensing lines 96 and 97 
and closes when the oil pressure at the 
gland seals decreases to 5 psi above 
the hydrogen pressure. Closing also 
activates the backup pump 50a' . 



65 



DRD63 Provides indication of flow in pipe 

connected to drain valve 231 of drain 
regulator 64. 



4 



EP0229 719B1 



10 



15 



20 



25 



Pressure and Flow Transmitters 

HSOFXD Provides indication o£ differential 
pressure across filter 58h* 

ASOFXD Provides indication of differential 
pressure across filter 58a. 

ASOHXD Connected to sensing lines 96 and 97 
and indicates the difference betv/een 
the sealing oil and hydrogen pressures. 

AS.OEXD Connected to sensing line 93 and 
indicates the air side oil pressure at 
the exciter end. 

ASOTXD Connected to sense line 95 and indi- 
cates the air side oil pressure at the 
turbine end. 

DRFXD Indicates flow in pipe feeding valve 

232 of drain regulator 64. 



30 



35 



Thermocouples 
TC2510 

TC2515 



Provides indication of temperature of 
the air side oil after passage through 
cooler 54a. 

Indicates temperature of input cooling 
water to cooler 54a. 
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TC2516 Indicates temperature of output water 
from cooler 54a. 

TC2520 Provides indication of temperature of 
the hydrogen side oil after passage 
. through cooler 54h. 

TC2525 Indicates temperature of input cooling 
water to- cooler 54h. 



TC2526 

Level Switches 
DTE71 



Indicates temperature of output water 
from cooler 54h. 



Indicates high level of hydrogen side 

oil in def earning tank 60e. 

DTT71 . Indicates high level of hydrogen side 
oil in def earning tank 60t. 

DRT71 Provides indication of low oil level in 
drain regulator 64. 
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DRI71 

Gauges 

ga4610 

ga4630 

qa465Q 

qa4620 
ga4640 

olq 

Thermometers 



Provides indication that oil is backing 
up in drain regulator 64. 



Differential pressure gauge at exciter 
end. 

Differential pressure gauge at turbine 
end. 



Hydrogen 
gauge . 



side sealing oil pressure 



Air side sealing oil pressure gauge. 

Indicates pressure at output of air 
side pump 50a. 

Oil level gauge for drain regulator 64. 
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txn520 Shows temperature of hydrogen side seal 
oil. 

"^"^SlO Shows temperature of air side sealing 
oil. 

Except for the gauges and thermometers all of the above sensors provide on-line output indications to 
be used by the diagnostic computer 22 (Fig. 1) in the practice of the present invention. 

The diagnostic computer 22 In a preferred embodiment controls the diagnostic process by implementa- 
tion of an expert system computer program that uses knowledge representations and inference proce- 
dures to reach conclusions nomially determined by a human expert A common forni of knowledge repre- 
sentation is in the forni of IF....THEN rules. One such system which may be utilized in the practice of the 
present invention is PDS (Process Diagnosis System) described in the proceedings of the Eighth Inter- 
national Joint Conference on Artificial Intelligence, August 8-12, 1983, pages 158-163. Basically, m that 
system (as well as other expert systems) for each rule there is an antecedent or evidence (the IF por- 
tion) as well as a consequent or hypothesis (the THEN portion) which can become evidence for other 
rules. 

figa 

As depicted in Rgure 4, evidence 100 is linked to the consequent hypothesis 102 by means of mie 104 
with the evidence and hypothesis constituting nodes of the system. Numeral 106 represents a supporting 
rule of node 100. that is, a mie for which node 100 would be a hypothesis. Rule 104 is a supported rule of 
node 100, that is, a rule for which node 100 is evidence. Ukewise, rule 104 is a supporting mIe for node 
102. In the system, by way of example, nodes can take the form of evidence, hypothesis, malfunctions, 
sensors and storage-nodes which are nodes capable of storing values input from other nodes and per- 
forming some predetennined mathematical operation on the values. In the figures, hypothesis (or evi- 
dence) nodes are octagonal, abnonnal conditions are presented In a malfunction node and are illustrated 
as rectangles, sensor nodes are drcular and storage nodes are trapezoidal. 

Associated with each node is a measure of reliability, MB, that the node (hypothesis) is true, as well 
as a measure of error, MD, which indicates the probabilty that the hypothesis is not true. Both factors 
range on a scale from 0 to 1 and the difference between them, MB - MD. yields a certainty or confidence 
factor CF which ranges from -1 to +1, where positive numbers represent confidence that the hypothesis 
is true and negative numbers represent the confidence that the hypothesis is not true; numbers in the vi- 
cinity of 0 represent uncertainty. 
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An expert (or experts) in the field to which the diagnosis pertains establishes the various rules and re- 
lationships, whidi are stored In the computer's memory and utilized in the diagnostic process. The ex- 
pert's confidence In the sufficiency of the rule Is also utilized. This confidence, which represents the ex- 
pert's opinion as to how the presence of evidence proves the hypothesis, Is given a numerical represen- 
5 tation designated as a sufficiency factor, SF, which ranges from -1 to +1, where positive values of SF 
denote that the presence of the evidence suggests that the hypothesis Is true and negative values de- 
note that the presence of the evidence suggests that the hypothesis Is not true. 

PDS additionally utilizes the expert's confidence in the necessity of the rule, which illustrates to what 
degree the presence of the evidence Is necessary for the hypothesis to be true. This necessity is given 
10 a numeral representation designated as a necessity factor NF which ranges from -1 to +1, where posi- 
tive values of NF denote that the absence of evidence suggests that the hypothesis is not true and neg- 
ative values denote that the absence of the evidence suggests that the hypothesis is true. 

Fia.5 

15 

Figure 5 illustrates another common anxuigement wherein a plurality of rules 110 to 112 connect evi- 
dence nodes 114to 1 17 to a malfunction node 118. Element 120 represents the combining of evidence in a) a 
disjunctive manner, that is, if evidence 116 OR 1 17 is present, or b) in a conjunctive manner, that is, if evi- 
dence 116 AND 117 are present. Numeral 122 designates a NOT function and where used (although not 
20 given a numerical designation in the Figs.) indicates that the evidence to which it is linked, Is not present. 

Confidence leading to a consequent possible malfunction in the system being diagnosed is propagated 
from evidence to hypothesis in repetitive cycles, at the beginning of which the CF, MB and MD values 
of each node are reset to zero (except for a sensor node where the MB and accordingly the CF is as- 
sumed to be -i-l). 

25 If the CF of the evidence is positive, then the rule's sufficiency is utilized to propagate confidence, 
whereas if the CF of the evidence is negative, the rule's necessity is utilized; if CF is zero, nothing is 
done. 

Basically, If the evidence CF is positive and the 8F is positive, then the MB of the hypothesis is in- 
creased; If the SF Is negative, then tiie MD of the hypothesis is Increased. 
30 Conversely, If the evidence CF Is negative, and the NF positive, then the MD of the hypothesis is in- 
creased, and If the NF is negative, the MB of the hypothesis is increased. By way of example, for the 
single rule case of Figure 4, If MB and MD are the reliability and error of the rule's hypothesis, CF the 
confidence in the rule's evidence, and SF and NF are the rule's suffidency and necessity, then: 

35 if CF > 0 and SF > 0: 
MB«=CFxSF (1) 
MD is not changed 

if CF>OandSF<0: 
40 MD»CFx(-SF)(2) 
MB is not changed 

ifCF<Oand NF>0: 
MD = (-CF)xNF (3) 
45 MB is not changed 
If CF<OandNF<0: 
MB = CFxNF(4) 
MD is not changed 

50 For the multiple rule case of Figure 5, final values are obtained by examining each rule in sequence 
and perfonning the calculations for each rule in accordance with the following, where MBotd and MDoid 
are the reliability and error In the rule's hypothesis (malfunction) before each calculation, CF the confi- 
dence In the rule's evidence, SF and NF are the rule's sufficiency and necessity and MBnew and MDnew 
are the reliability and error of the rule's hypothesis (malfunction) after each calculation: 

55 

if CF>OandSF>0: 

MBnew » MBold (1 - MBoid) x CF x SF (5) 
MDnew » MDold 

^ lfCF>0andSF<0: 

MDnew <= MDoid + (1 - MDoid) x CF x (-SF) (6) 
MBnew » MBold 

65 
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if CF<Oand NF>0: 

MDnsw » MOou (1 - MDoid) x (-CF) x NF (7) 
MBnew-MBoid 

ifCF<Oand NF<0: 
MBnew » MBoid + (1 - MBom) X CF X NF (8) 
MDnew«MDoW 

For a disjunctive logical node (OR function) the highest confidence factor of all of the pieces of evi- 
dence may be utilized or the CF may be obtained by subtracting the minimum MO from the maximum MB. If 
the logical node Is conjunctive (AND function) the minimum of ail of the confidence factors may be uti- 
lized or the CF may be obtained by subtracting the maximum MD from the minimum MB. Alternatively, 
weighted averages may be utilized for the OR and AND functions. 

The AND and OR functions are not digital (ONE or ZERO) In nature and the logic utilized is known as 
fuzzy logic. Accordingly, as utilized herein, fuzzy logic AND and OR functions are designated with an A 
and 0 respectively whereas weighted AND and OR functions are designated with a horizontal bar and 
the appropriate letter designation. 

Thus, by utilizing tiie appropriate previous equations, a measure of reliability or ent)r Is calculated for 
a hypothesis and from these values a confidence factor in the hypothesis is calculated from the reiation- 
2° shipCF = MB-MD. 

Hqi6(A&B) 
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A rule's sufficiency (SF) or necessity (NF) may in many instances be expressed as a constant. In oth- 
er instances, the sufficiency and/or necessity may be expressed as some other function which will gen- 
erate a sufficiency or necessity factor of a fixed number by evaluating the function for a particular vari- 
able. A common function which may be utilized is a piece-wise linear function, two examples of which are 
illustrated in Figures 6A and 6B. The Y-axis in these figures represents the SF (or NF) ranging from -1 
to +1 on the vertical scale. The X-axis horizontal scale represents the value of some variable such as a 
sensor reading or tiie result of some mathematical operation, by way of example. In Rgure 6A, if the vari- 
able has a value between 0 and a, or is greater than f, it will generate an SF of -1 whereas if tiie value is 
between c and d, it will generate an SF of +1. Values between a and c or d and if will generate corre- 
sponding SPs between -1 and +1. 

Figure 6B represents a piece-wise linear function wherein any variable value greater than b will gen- 
erate an SF of +1 , any variable value less than -b will generate an SF of -1 and values between -b and -hb 
will generate a con-esponding SF between -1 and +1 . 

Anotiier type of useful rule is a reading-transform mle which, when canied out, applies a transform 
function to the value found in the rule's evidence node. If the evidence node is a sensor, the value is a 
sensor reading, with appropriate conversion, scaling, eta, perfomied by the transfonn if needed. 

Rgures 7-17 are nodal diagrams or rule base flow charts illustrating tiie diagnostic process of the 
present invention performed by diagnostic computer 22 for arriving at various sealing oil system abnor- 
mal conditions based upon sensor readings, and implemented in accordance with the expert system previ- 
ously described. 

Witii respect to Figs. 7-17, some of the hypotheses used in one figure may emanate from anotiier fig- 
ure and to provide some guide to the origin of an hypothesis, reference may be made to Appendix A. This 
Appendix sets fortii in tabular form tiie hypothesis designation in numerical order, togettier wifli a brief 
explanation and the figure number where tiie hypothesis is first generated. 

The diagnosis presented in Rgs. 7-17 relates to the sealing oil system described by way of example in 
Rg. 2 and accordingly, additional reference should be made to Rg. 2. 

FIG. 7 (A & 



Rgure 7 illustrates some possible abnonmal conditions which may be diagnosed and which relate to the 
55 hydrogen side oil flow. One such condition is indicated at node m400 designating to an operator a loss of 
pump action on the hydrogen side sealing oil system. Normal^ this is indicated by activation of the pres* 
sure switch IHS063 connected across pump 50h. The output indication provided by I^S063 is also used 
In the present arrangement but additional supportive evidence is included leading up to tiie particular 
condition. ,The on-line sensor readings are automatically scanned and placed into sensor nodes of the ex- 
ec pert system. Two such sensor nodes are illustrated in Figure 7 and are respectively designated by tiieir 
sensor names H8063 and HSOFXD. Rule r400 relates the sensor condition of HS063 into a belief tiiat 
tiie hydrogen side sealing oil pump 50h is off (or providing insufficient pressure), node h400. Nonnaily In 
the absence of any sensor abnormality, confidence in ttie hydrogen side pump being off may be propa- 
gated unaltered and used in the determination of loss of pump action, node m400. In tiie presence of a 
55 sensor abnormality however the confidence must be reduced. 



8 



EP 0 229 719 B1 



Basically, the modification of the confidence is accomplished by a parametric alteration rule which is 
operable to change the sufficiency function and/or necessity function of another rule. Accordingly, an 
analysis is made regarding the operability of switch HS063. The analysis may result in a determination of 
a faulty HS063 switch (or Its associated circuitry), node m401 at the lower right portion of Figure 7A. If 

5 indeed the switch Is faulty, a parametric alteration rule pr4 is generated to alter the sufficiency of njle 
r401 linking hypothesis h400 with hypothesis h409 indicating a validated conclusion regarding the hydro- 
gen side pump being off. That is, in the absence of a faulty HS063 switch, the confidence in the hydro- 
gen side pump being off is propagated unaltered to node m400, whereas if there is a faulty switch, the 
propagated confidence would be proportionately lower. 

10 Additional evidence leading to the conclusion of the loss of pump action Includes an hypothesis h499 
at the upper left hand corner of Rg. 7A and statng that the cooler water differential temperature is ap- 
proximately zero. In other words, if thermocouples TC2525 and TC2526 transmit substantially identical 
temperatures of the input and output cooling water to cooler 54h, this indicates that hot oil is not being 
pumped since, if hot oil were being circulated by pump 50h, the cooling water would remove the heat and 

15 experience a rise in temperature. This condition is linked to node m400 by means of rule r4005. 

Sensor readings from the hydrogen system 16 (Rgure 1) may also be utilized in the diagnosis of the 
sealing oil system 20. Hypotheses generated in the hydrogen system and utilized in the sealing oil system 
diagnosis are shown in the Rgures in dotted form, one of which is h209. One such hhpothesis is that the 
hydrogen purity is low, a condition which may be caused by tack of pumping action allowing air side oil into 

20 the defoaming tanks resulting in air entering the generator atmosphere and degrading the hydrogen puri- 
ty thereof. 

Although these two latter conditions, low hydrogen purity and cooler water differential temperature 
being zero contribute additional confidence in the toss of pump action, their contribution would not be as 
great as the validated conclusion that the hydrogen side pump was off transmitted from h409. Accord- 

25 ingly, the sufficiency factors of rules r4005 and r4004 linking nodes h499 and h209 to node m400 would 
not be as great as the sufficiency factor for rule r4003 linking node h409. 

Another observation lending more credence to the loss of pump action conclusion may be derived 
from sensor HSOFXD across filter 58h. If the pump s not working there is no oil flow and accordingly 
there would be no pressure drop across the filter. Rule r405 converts the sensor reading into a confi- 

30 dence that the differential pressure across the filter is nearly zero, node h513. This aP determination 
may be validated by checking to see If sensor HSOFXD generates a parametric alteration mle to modify 
the sufficiency and/or necessity of rule r4001 linking h513 with the conclusion depicted at m400. 

Rule r408 at the lower left portion of Rgure 7A establishes that a difference exists between certain 
derived indications, and utilizes a plurality of logic functions 300 to 302. Basically, rule r408 may be 

35 traced back via AND functions 300 and 301 to hypotheses h400, h513 and h499. As depicted at AND 
300, if the hydrogen side pump is indicated as being off, the differential pressure is not zero as It should 
be for such a condition and the cooler water differential temperature is not zero as it should be for such 
a condition, then mle r408 establishes that a disagreement exists, node h518. Conversely, r408 also ap- 
plies if, as depicted at AND 301, the cooler water differential pressure is zero and the differentia! pres- 

40 sure across the filter Is zero but the hydrogen side pump is indicated as not being off. In accordance 
with the present Invention if this disagreement does exist then off-line readings are additionally used in 
the diagnostic process, such off-line procedures being indicated In the Rgures by means of the dot- 
dash lines. 

With the occunpence of this disagreement indication, a message is provided to the operator, as indi- 

45 cated by procedure PI to read gauges ga4610, ga4630 and ga4650 and to enter their values into the sys- 
tem. This Is accomplished with the provision of keyboard 28. Once Inputted, the values read are placed 
into the respective sensor nodes ga4610, ga4630 and ga4650 illustrated in Rgure 7B. Storage node 
stn419 receives the gauge ga4650 reading via a reading transfonn rt432 and receives an indication of 
hydrogen pressure by means of reading transform rt433 from a sensor HYDXD located in tiie hydrogen 

50 system. The storage node operates to take tiie difference In the two readings and, via rule r409 trans- 
fomns this difference into a confidence level that the oil pressure is approximately equal to the gas pres- 
sure, node h403. Since check valve 234 Is downstream of gauge 4650. if pump 50h Is off, the pressure 
indicated by this gauge would be the hydrogen gas pressure existing in drain regulator 64. 
The other two gauge readings in sensor nodes ga4610 and ga4630 are utilized to determine if the air 

55 side oil pressure is high at the exciter end as well as at the turisine end. These two differential gauges 
should nonnally read approximately zero. If the hydrogen side pump 50h Is off, tiien reduced oil pressure 
exists in the hydrogen side oil delivery pipe 90h and the air side pump 50a supplies all of the sealing oil to 
both the air side and hydrogen side grooves resulting in a significant differential pressure due to the 
higher air side oil pressure. The determination of high air side oil pressure is accomplished by use of rule 

60 r402 which may use a piece-wise linear mapping of the particular reading into a determination of high air 
side pressure at node h401 associated with the exciter end. Similariy, rule r403 links tine sensor reading 
of ga4630 with hypothesis h402 indicative of a high air side pressure at the turbine end. These two con- 
ditions are utilized by rule r512 including AND function 304 to detemnine at node h460 that high air pres- 
sure exists at both the exciter and turbine ends. The latter condition and the condition of the oil pressure 

65 being approximately equal to tiie gas pressure are botti linked to the loss of pump acton node m400 by 
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means of rules r4008 and r406 respectively and both have relatively high sufficiency factors in deter- 
mining the abnormal condition at node m400. 

The off-line readings are also used to assist in the determination that a feulty HS063 switch exists as 
previously set forth at node m401. For example, rule r4122 utilizes AND function 306 to determine that 
5 the hydrogen side pump is off according to off-line sensors, node h567. This conclusion is reached if, 
according to node h460. both the exciter and turbine ends have high air pressure, and the oil pressure Is 
approximately equal to the gas pressure, node h403. 

If, according to off-line sensors, the pump is off and it is not off according to switch HS063 (AND 
308), or, if the pump is off according to HS063 (OR 309) but not off according to the off-line sensors 
10 (AND 310) then mle r4123 uses the conclusions of hypotiieses. h400 and h567 to determine the probabili- 
iy that a faulty HS063 swHch exists. 

Two other pieces of evidence are utilized in determining whether switch HS063 is faulty, one of which 
is propagated by rule r4009 and the other by rule r4010. Rule r4009 utilizes a weighted AND function 312 
which combines the evidence that the pump is off according to HS063 coupled with the data that the cool- 
15 er water temperature differential is not zero, the hydrogen purity is not low and the differentia! pressure 
across the filter is not zero. If these three latter conditions exist then the pump should not be indicated 
as being off and accordingly tiie switch is probably bad. 

Rule r401 0 utilizes weighted AND function 31 3 to reverse the consideration of weighted AND 31 2. 

The off-line sensor readings of gauges ga4610 and ga4630 may be used to diagnose otiier potential 
20 problems. For example, if there is high air side pressure at the exciter end but not at the turbine end, rule 
r4016 n Rgure 7B uses AND function 316 to determine that a problem is likely to exist in the exciter and 
as depicted at node h520. If tiiere is a problem in the exciter end and if the drain valve 321 is opened, 
node h454, then rule r4018 uses AND function 318 to arrive at the conclusion, node m477, that there is 
ring wear on the exciter end of the hydrogen side sealing oil ring. This conclusion Is reached because, 
25 witii a bad ring, more oil than normal will be drained into the drain regulator resulting in float operated 
drain valve 231 being opened. If however, drain valve 231 is not open then it Is likely that differential 
pressure valve 210 is In a closed condition, node m443, using rule r4019 and AND function 319. 



30 FIG. 8 (A & B) 

Figures 7A and 78 Illustrate the diagnostic process used to determine possible abnormal conditons 
relative to the hydrogen side oil flow. Figures 8A and 8B illustrate the diagnostic process used to deter- 
mine possible abnormal conditions relative to the air side oil flow. The on-line condition of pressure 

35 switch AS063 connected across air side pump 58a Is Input to sensor node AS063 in Rgure 8A and rule 
r410 derives the confidence level thattiie air side pump is off, node h569. Rule r4126 may have Its suffi- 
ciency and necessity changed by parametric alteration rules pr434 and pr433 to conclude, node h404, 
that the ar side pump is indeed off. 
This confidence level is linked by rule r411 to the conclusion, node m403, that there is a loss of pump- 

40 ing action on the air side sealing oil system. This conclusion is reached by knowing that the air side seal- 
ing oil pump will deliver oil at a pressure which is approximately 12 psi above tiie hydrogen gas pressure. 
If pumping action should stop, the backup oil supply 70 will come on line. However, the oil delivered by 
the backup supply is at a pressure lower tiian that normally supplied by the air side pump. Therefore a 
differential pressure of 8 psi between the air side oil pressure and the hydrogen pressure, as opposed 

45 to the normal 1 2 psi difference, Indicates loss of air side pumping action. 

The two sensors for detemriining air side oil pressure are ASOEXD at the exciter end and ASOTXD at 
the turbine end. A determination Is made (Fig. 12) as to whether or not these values agree and the results 
are utilized In the diagnostic procedure of Rgure 8A at node h474. In addition, tiie maximum pressure in- 
dicated by these two sensors Is utilized and compared witii the hydrogen pressure to see if the differ- 

50 ence, Indicated at node h51 2 Is approximately 8 psi. 

In Rgure 8A. rule r4023 utilizes AND function 320 to check if the sensors agree. h474, and if the dif- 
ferential pressure is 8 psi, h512. The conclusion that tiie differential pressure is 8 psi but there is no sen- 
sor reading agreement, node h506, is output as rule 4026 to tiie loss of pumping action node, m403. If 
the 8 psi differential exists and there is agreement between the two sensors, AND 322 outputs the two 

55 conftdenoe levels as a rule, r4024 to node h522 which in tum outputs the conclusion r4027 to node 
m403 thereby increasing the confidence level in the conclusion that there is a loss of pumping action, 
m403. 

If the air side pump is off and the conclusion of node h506 is not present or if it is present and the air 
side pump is on, then rule r4025 uses this Information to conclude, using AND and OR functions 322 to 
60 324, that a disagreement exists, node h523. This disagreement prompts a procedure P2 wherein the op- 
erator reads gauges ga4620 and ga4640 and enters their present values via the keyboard. These val- 
ues are shown in the diagnostic process as sensor nodes ga4620 and ga4640 seen in Fig. 8B. 

Rules r412 and r413 use piece-wise linear functions to map the reading of ga4640 Into a confidence 
level that the pressure is eitiier low or that the pressure is normal, shown respectively at nodes h405 
65 and h406. Normal pump pressure may, for example, be in the range of 130 to 150 psi whereas a low pres- 
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sure may be any pressure below 120 psL Pressures outside of the stated values would generate suffi- 
ciency factors other than 1 in accordance with the piece-wise linear functions used. 

Since there is normally a pressure drop across the cooler and filter, gauge ga4620 will indicate a low- 
er pressure such that the low pressure indication at node h407 may be indicative of a pressure below 
5 100 psi, as determined by rule r41 6. 

The low pressure indication at node h405 is used, by rule r4028, with another evidence, to conclude 
there is a loss of pumping action, node m403. The low pressure indication is also used by rule r4140 with 
other evidence to indicate a failure of the backup oil supply, node m405. Node m405 also uses the low 
pressure indication of node h407 linked by rule r41 39. i 
10 Another indication of the failure of the backup supply Is the presence of low turbine backup pressure, 
propagated by rule r4138, indicated at node h410 and determined utilizing mle r473. 

Evidence of backup source failure may also be provided by an Indication that the differential pres- 
sure is below what it should be, that is, 8 psi. Rule r4124 uses AND function 326 to examine the evidence 
presented by hypotheses h550e and h550t, stating that the air side exciter end and air side turbine end 
15 sensor values minus the hydrogen pressure result in a differentia! pressure of less than 8 psi. If these 
two conditions exist, then node h568 concludes that the differential pressure is less than 8 psi and this 
conclusion is linked to node m405 by rule r417. 

The conclusion of h568 is also used in rule r4125 to determine possible backup source failure. Rule 
r4125 includes an AND function 328 as well an OR function 329 such that If the turbine end differential 
20 pressure indicates a negative rate of change (h509) or if the exciter end differential pressure indicates 
a negative rate of change (h480) that is, the differential pressure is decreasing, then a backup source 
failure is indicated if the differential pressure is less than 8 psi. 

As previously described, the air side pump off condition of node h569 is validated at node h404 in ac- 
cordance with parametric alteration rules pr433 and pr434. The propagation of the confidence level that 
25 the air side pump is off may be temilnated if the pressure switch AS063 is in fact faul^. with this deter- 
mination being made at node m404 in the tower portion of Rg. 8B. To anive at the conclusion of a faulty 
switch, rule r415 takes into account various pieces of evidence utilizing AND functions 331 to 333 and 
OR function 334. 

For example, using AND function 331, a faulty switch may be indicated If the air side-to-hydrogen 
30 pressure differential is approximately 8 psi, the exciter end and turbine end pressure sensors agree and 
the air side pump is not off. AND function 332, in determining the probability of a faulty switch, receives 
input of low gauge pressure, node h405, Indication that the pump is not off, node h569, and an indication 
that the backup pump is not on. This latter detemnination is made at node h408 using the backup pump 
pressure switch ASOB63 indication together with rule r474. 
35 AND function 333, in detemnination of the probability of a faulty switch, receives Inputs such as the 
backup pump and the air side pump both being off coupled with the gauge pressure being normal, node 
h406. For such inputs, if both pumps are off, then the pressure cannot be normal and accordingly a 
faulty ASD63 switch Is assumed. 

40 FIG.9rA&B^ 

Figures 9A and 93 depict abnormal conditions associated with the drain regulator 64. Sensor node 
DRI71 contains the condition of this switch, linked to the hypothesis via rule r424 tha^ if the switch Is ac- 
tivated, the drain regulator tank level is backing up. If the generator unit is off-line, rule r485 uses the 
45 evidence of the tank level backing up to conclused that oil is about to enter the generator unit through 
the sealing oil ring, node m435. This conclusion is supported by evidence from an off-line indication 
linked to the hypothesis at node h464 by rule r4031 that the oil level gauge olg Indicates a high level con- 
dition. 

Figure 98 illustrates rules r530 and rS31 which convert the switch indication of sensor node DRD63 
50 and flow indication of sensor node DRFXD into respective confidence levels that the drain valve 231 is 
open, node h454, and that the feed valve 232 is open, node h453. 

By means of AND function 336, rule r526 receives inputs of the valve conditions and if the drain 
valve 231 is indicated as open, the feed valve 232 is indicated as closed, and the tank level is indicated 
as high, node h455, then a suspicious condition exists, node h468, since the oil should be draining from 
55 the tank and therefore not backing up. 

Similarly a suspicious condition is indicated by rule r527 using AND function 337 and receiving the in- 
puts that the feed valve 232 is opened, the drain valve 231 is closed and the tank level is low. 

The presence of a suspicious condition, node h468, will instruct the operator to use procedure P3 to 
read gauge olg and enter the value of 1 if it indicates a low condition, a -1 if a high condition is indicated, 
60 or a zero if the condition is not certain. Rule r497 uses a piece-wise linear function to then convert the 
reading to a confidence level that the olg is high. If a 1 were entered at node olg, the confidence in a high 
olg at node h464 would be negative, indicating that the hypothesis (high level) is not true. 

Nodes h453 and h454 in Fig. 9B indicate the open condition of the feed valve 232 and drain valve 231 
respectively. These conditions may be utilized to determine the combinations of conditions in which these 
65 valves may be open or closed. For example, rule r487 uses AND function 340 receiving the inputs that 



11 



EP0229719B1 



the feed valve 232 is open and the drain vaive 231 is closed to conclude that the feed valve is open and 
the drain valve is closed node h465. Similar logic may be used to detennine that the feed valve is closed 
while the drain valve is opened. Rule r528 uses AND function 341 to conclude that both valves are 
open, node h469 (since there is no negation function at AND 341). leading to an abnormal condition indi- 

5 cation at node m453, \\nke6 by rule r529, that the drain and feed valves on the drain regulator tank are 
opened simultaneously, a condition that should not be occun^lng. 

The simultaneous condition of the valves as set forth at nodes h465 and h469 are used, with other ev- 
idence, to determine, further abnormal operating conditions. For example, in Fig. 9A rule r489 uses AND 
function 344 receiving as inputs backing up of the tank level, node h455, and an indication that the feed 

10 valve is open while the drain valve is closed, node h465 to determine that the drain regulator tank level 
is high, node m442. 

If the drain tank level is backing up, the level is not high due to the feed valve being stuck open, and if 
both valves are not open, then a conclusion is drawn that the tank is baddng up due to some obstmction 
in the drain line, oile r491 linked with rule r4033. 

15 

no. 10 

The diagnostic process illustrated in Figure 10 uses the status of the exciter and turbine end defoam- 
Ing tank sensors DTE71 and DTT71 to detennine abnormal conditions occuning in the defoaming tanks 
20 60e and/or 60t. 

With respect to the exciter end diagnosis, mle r535 converts the contact input into a confidence level 
that the exciter end defoaming tank level is high, node h472. If the hydrogen side oil is also hot, node 
h484, then rule r538 uses AND function 350 to conclude that the oil level in the defoaming tank 60e is 
high and contains hot oil, node h526. The same conclusion is reached at node h527 in the analysis of the 
25 turbine end defoaming tank using the sensor input of DTT71 , mle r422, hypothesis h41 4 and rule r533. 

The determination at node h570 that both the exciter end and tuibine end defoaming tank levels are 
high is made using rule r4127 in conjunction with AND function 352. 

With this Information, various conclusions may be drawn about possible abnormal conditions of the ex- 
citer and turbine end defoaming tanks. For example, if the hydrogen side oil is hot it will be less viscous 
30 and will flow more readily. If the level is high in both the exciter and turbine end defoaming tanks and if 
the oil is hot in both of these tanks, then rule r4045 uses AND function 354 to determine that the high 
level on both defoaming tanks is due to the hot hydrogen side seal oil, node m482. 

With respect to the exciter end defoaming tank, rule r4044 uses AND function 355 receiving inputs 
that the level is high and the oil is hot in the exciter end defoaming tank and that there is not a high level In 
35 both defoaming tanks, node m482, to conclude that there is a high level on the exciter end (only) defoam- 
ing tank due to hot oil, node nr)456. 

The high level could also be due to some obstruction in the drain line which goes to the drain regulator, 
node m457. It is determined by rule r539 using AND function 356 receiving the inputs that the level is 
high but not due to hot oil, node h526, that both sides are not high, node h570 and that the level is high In 
40 the exciter end defoaming tank node h472. 

The identical conclusions are presented for the turbine end defoaming tank at nodes m409 and m454 
utilizing rules r4046 and rS32 with their respective AND functions 357 and 358. 

FIG 11 

45 

Rgure 11 illustrates the possible outputs of sensor ASOHXD which provides to Its counterpart sen- 
sor nodes the value of the differential pressure between the hydrogen and air side oil pressures. Under 
normal operating conditions the oil pressure may be around 87 psi and the hydrogen gas pressure 
around 75 psi resulting in a differential pressure aP = 12 psi. All hypotheses shown at the sensor nodes 

50 are determined by a piece-wise linear function dependent upon the actual pressures designed for the 
particular sealing oil system. Storage node stn402 linked to the sensor reading by reading transfonn 
rt404 calculates the rate of change of the differential pressure and detennines whether the difference 
between the two pressures is getting smaller. 
An abnormal condition which has an exceptionally high priority is that of very low sealing oil pressure, 

55 node m483. Rule r4052 uses the combining logic of functions 360 to 362 to determine if the differential 
pressure is below 5 psi. That is, if the oil pressure is not at least 5 psi above the hydrogen gas pressure 
then an emergency situation may^exist. The logic functions associated with mle r4052 detennine that if 
the differential pressure is approximately equal to 5 psi or less and if the backup pump is on or the pres- 
sure switch ASOH63 has activated, indicating a pressure less than 5 psi, rule r487 and hypothesis 

60 h431, then low sealing oil pressure is present, node m483. 

Another abnormal condition is Indicated at node m484 relating to the malfunction of differential pres- 
sure bypass regulator valve 256 which may have failed or which may have an incorrect setting. Rule 
r4053 uses AND function 364 to detennine that the differential pressure as measured by sensor ASO- 
HXD is high coupled with the fact that the turbine backup pressure is not low and that the air side pump is 

65 not off. That is, if the air side pump 50a is correctly operating, then a differential pressure higher than 
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normal suggests trouble with valve 256, the setting of which should maintain the desired 12 psi pressure 
differential during normal operation. 

The abnormal condition defined at node m485 relates to the malfunction or Incorrect setting of backup 
differential pressure regulator valve 264. If the air side pump Is down, the oil Is being supplied by the 

5 backup oil supply 70 to maintain a differential pressure with respect to the hydrogen pressure of 8 psi. If 
the differential pressure is high and the air side pump is off, then the pressure regulation provided by 
valve 264 is incorrect since the differential pressure should not be high but should be 8 psi. Rule r4055 
uses AND function 370 to reach this conclusion, node m485. This conclusion may be reached using oth- 
er evidence from inputs to logic nodes 366 to 368. The differential pressure may be measured directly by 

10 sensor ASOHXD and/or indirectly by the individual sensors ASOEXD and ASOTXD compared with the 
actual hydrogen pressure. If the differential pressure as measured by any one of these three methods 
Is not decreasing, that is, the system Is stabilized, and if the air side pump is off, node h404, then trouble 
with valve 264 is indicated if the differential pressure is less than 8 psi. 

15 BQJiZ 

The diagnostic procedure illustrated in Figure 12 uses individual sensor readings to establish differen- 
tial pressure ranges. Sensor nodes ASOEXD and ASOTXD receve pressure values from their respec- 
tive sensors indicative of the gland seal air side oil pressure at the exciter end and at the turbine end re- 
20 spectively. The hydrogen pressure stored in node IHYDXD is subtracted from the turbine and exciter 
end pressure values in respective storage nodes stn405 and stn406 linked by respective reading 
transform rules rt409 to rt412. 

Several of the differential pressures with respect to the exciter end are set forth below together with 
their associated hypothesis and rule, each of which would incorporate a different piece-wise linear func- 
25 tion: 



Differential Pressure 


Hypothesis 


Rule 


Between 8 & 12 psi 


h457 


r547 


Approximately 8 psi 


h535 


r4060 


Between 5 & 8 psi 


h450 


r548 


Approximately 5 psi 


h479 


r546 


Between 0 & 5 psi 


h536 


r4061 


Less than 0 psi 


h478 


r545 



40 

In addition, reading transfonn rt413 links the difference, in storage node stn406, to storage node 
stn407 In which the change in differential pressure with respect to time is derived and rule r540 deter- 
mines whether this change is negative, node h480. 

Several differential pressure values with respect to the turbine end are set forth below. 

45 



Diifferential Pressure 


Hypothesis 


Rule 


Approximately 12 psi 


h540 


r4065 


Between 8 & 12 psi 


h541 


r4066 


Approximately 8 psi 


h542 


r4067 


Between 5 & 8 psi 


h543 


r4068 



55 

In addition, the confidence level in a negative rate of change is established at node h509 using rule 
r4074, storage node stn416 and reading transform rt431. 
Figure 12 additionally illustrates other information which may be derived from the sensor readings. For 
60 example, storage node stn403 linked to sensor node ASOEXD by reading transform rt405 and to 
ASOTXD by reading transform rt406 may be used to determine the higher of the two sensor readings. 
The higher valued reading is linked by reading transform rt425 to storage node stn415 which also re- 
ceives the hydrogen pressure via reading transform rt426 and computes the difference. By means of a 
piece-wise linear function associated with rule r4057, a determination is made as to whether or not the 
65 maximum differential pressure is approximately 8 psi, node h512. 
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Reading transforms rt407 and rt408 also place the sensor values into storage node stn404 in which 
the difference between them is computed and, by means of a piece-wse linear function associated with 
rule r541, whether this difference is significant, node h474. 

5 FIG. 13 

The differential pressure values derived in Rgure 12 may be used to diagnose various abnormal con- 
ditions. For example, a coonclusion that the air side sealing oil ring on the exciter end (only) gland seal is 
worn may be reached from coidering the inputs that a significant difference exists between the ASOEXD 
10 and ASOTXD readings, node h474; the air side pump is on, negated node h404; the differential pres- 
sure is less than 12 psi at the exciter end; and the differential pressure at the turbine end Is approximate- 
ly 12 psi, node h540. 

A conclusion that there Is a worn sealing oil ring on the exciter end may also be reached from rule rS54 
using AND function 382 receiving as inpuuts the signals that tiie differential pressure Is less than 8 psi; 

15 the air side pump is off, h404; a significant difference between the ssensor readings exists, h474; the 
backup pump is not on, negated node h408; and the turbine end differential pressure is approximately 8 
psi node h542. Although the detenninatlon of a worn sealing oil ring using rule 554 is similar to that using 
rule r557, the rule r554 is applied to operation of the system wherein the backup oil supply 70 Is activat- 
ed, during which time differential pressure should be 8 psi. 

20 An increased oil flow increases confidence that there is a wom sealing oil ring and manifests itself by 
a higher differential pressure appearing across the air side filter 58a, node h462. 

By using the pressure sensor on the turbine end, and the differential pressures derived with that sen- 
sor, the diagnostic process illustrated in Figure 13 can be equally applied to the determination of a wom 
air side sealing oil ring on the turbine end. Hypothesis h550t utilized in Rg. 8A and establishing a differ- 

25 ential pressure less than 8 psi at the turbine end would be derived exactly as in h550e for the exciter 
end, using pressure ranges derived with sensor ASOTXD instead of ASOEXD. 

Fiai4 

30 Rgure 14 illustrates the diagnostic process for determination of the general condition of excessive 
ring wear and not the specific condition of air side ring wear on the exciter end or turiDine end. The deter- 
mination of hydrogen side ring wear could be made if hydrogen side pressure sensors were provided. 
However, the arrangement of Rgure 2 only includes air side sensors ASOEXD and ASOTXD. Accord- 
ingly, the determination of general sealing oil ring wear, as set forth In Rgure 14, Is based upon evidence 

35 other than would be provided by hydrogen side sensor readings. 

If the hydrogen side portion of the sealing oil ring is wom, there will be excessive oil flow due to the 
greater gap between the seat and the shaft. When this occurs, oil may work itself into the generator 
housing along the shaft or the defoaming tank may back up to a point where oil enters the generator. Ac- 
cordingly, one of the prime consMerations for sealing oil ring wear is the possibility of oil entering the 

40 generator. The generator Includes oil leak detectors as part of the hydrogen purity system and if there 
is an oil leak detected at the turbine end or if there is oil in the generator's lead box. Indicating an oil leak 
at the exciter end, then rule r4000 uses OR function 386 to conclude that ^ere is oil entry, node h504. 

With respect to the problem of wom sealing oil rings, however, oil entry may be due to the oil being ex- 
cessively hot, in which case the gland seal ring may expand increasing the gap between it and the shaft 

45 and resulting in oil entry. Accordingly, rule r599 uses AND function 387 to conclude that there is oil en- 
try, at node h505, only after considering the oil temperature, node h428. 

The purpose of the dual oil system, a hydrogen side supply and an air side supply, is to prevent the hy- 
drogen side oil from becoming contaminated with water or air. If there is excessive ring wear, the air side 
oil may mix with the hydrogen side oil and contaminate it such that water and air which normally may be 

50 present in the air side oil diffuse out of the hydrogen side oil and mix with the general atmosphere within 
the generator increasing its humidity and decreasing its purity, node h503. 

Similariy, the determination of low purity, node h502, is reached using AND function 392 receiving in- 
puts that the hydrogen purity is low; the hydrogen side pump Is not off; and the oil is not hot. 
The confidence in excessive ring wear at node m418 Is modified by rule r4146 if the differential pres- 

55 sure is not within the proper operating range. The output of AND function 395 requires both the exciter 
end and turbine end differential pressures to be between 8 and 12 psi derived from the individual exciter 
end and turtsine end pressure sensors ASOEXD and ASOTXD respectively. Alternatively, using OR 
function 394 this same pressure differential range may be established by the single sensor HSOHXD. 
A final determination of an abnormal condition is provided by rule r4145 ha^ng as Input a high differ- 

60 ential pressure across the hydrogen side filter, Indicative of a greater oil flow due to wom rings. 
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FiG.15fA&B) 

Figures 15A and 156 illustrate diagnosis of possible abnormal conditions with respect to the hydrogen 
side oil temperature. Identical considerations can be given to the air side oil temperature using the re- 

5 spective appropriate sensors. 

The hydrogen side oil temperature is derived from thermocouple TC2520 at the output of cooler 54h. 
Using rule r430, the reading of TC2520 is examined and if it is above or below predetermined known 
amounts, the determination is made, node h446. that the thermocouple reading Is out of range leading to 
a defective thermocouple conclusion, node m41 3. 

10 If a defective themriocouple is initially determined, a procedure P4 may be Indicated to the operator 
whereby thermometer tm520 Is to be read and the temperature value entered into the diagnostic system 
at sensor nodes tm520. This same procedure is also Initiated if a significant difference exists between 
the outputs of the hydrogen side and air side thermooouples TC2520 and TC2510. Reading transforms 
rt417 and rt418 provide the thermocouple values to storage node stn409 which checks to deterine if a 

15 significant difference exists between the two values, node h490. The existence of this significant differ- 
ence requires an operator to read the thermometer values and enter the values Into the system. 

The diagnostic process examines the output of TC2520 to see if the oil is cold or hot. This is respec- 
tively accomplished with rule r431 and node h416 for the cold determination, and rule r432 and node h420 
for the hot determination. 

20 If there is an indication of a defective themiocoupie at node m413, parametric alteration rule pr402 
changes the sufficiency of mtes r434 and r436 leading to a first validation of cold and hot oil in nodes 
h418 and h419 respectively. If the confidence In the defective thermocouple determination is negative, 
the sufficiency of rules r434 and 436 will remain unchanged. A parametric alteration rule pr410 is also 
used to change the necessity function of mles r435 and 437 leading to respective second validations of 

25 the cold and hot state of the oil at nodes h483 and h484 respectively. 

Other input signals may be used to determine not only the cold or hot oil states but also the presence 
of a defective thermocouple. For example, at the upper left portion of Figure 15A, the thermometer read- 
ing at node tm520 is related to a determination of cold oil at node h417 by rule r433. If the oil is cold as de- 
termined by the thermometer reading, a parametric alteration mle pr403 will increase the sufficiency of 

30 rule r435 tending to further validate the cold reading provided by the thermocouple TC2520. Rule r516 
the cold oil signal from node h417 contributes some degree of confidence to the second validation of cold 
oil at node h483. If a determination of a defective thermocouple is made, parametric alteration mles 
pr417 and pr418 will increase the sufficiency and necessity of rule r516 so that the cold oil determination 
is primarily derived from the thermometer reading, since the thermometer Is less likely to be defective. If 

35 the Indication Is that the thermocouple is not defective, the sufficiency and necessity of rule r516 will be 
decreased so that the cold oil determination is made usng the themiocoupie reading. Once the validation 
of cold oil has been made, rule r560 links this to the abnormal condition indicated at m411 that cold oil ex- 
ists in the hydrogen side, with the likelihood that it Is due to high water flow through the hydrogen side 
cooler. 

40 If it has been determined, at node h484 that the oil is hot, rule r561 uses AND function 400 receiving 
the inputs that the oil is hot and that the water flow to the cooler has been increased, node h563, to con- 
clude that hot oil exists, but the cause is unknown. This obsen^atlon at node nn412 is also operative to 
trigger procedure P4 if not already done. 
The hypothesis of hot oil at node h484 uses other inputs in arriving at this conclusion. For example, 

45 the operator entered reading of thermometer tm520 is mapped into a confidence level, at node h560, that 
the oil is hot, by rule r438. If the oil is hot, there is an increased flow thus causing a higher differential 
pressure across the hydrogen side filter 58h and rule r4099 uses this Input to increase the confidence 
level of the existence of hot oil at node h560. Rule r517 also provides input to node h484 that the oil Is hot 
in a manner similar to the cold oil determination. 

50 The hypothesis of node h441 in the lower left-hand portion of Fig. 15B is that a disagreement exists be- 
tween the on-line sensor reading of the themiocoupie TC2520 and the visual reading of the thermometer 
tm520. This hypothesis is reached by rule r440 using OR function 402 and AND functions 403 and 404. 
The rule examines the thermocouple and thermometer readings and if the thermocouple indicates that the 
temperature is hot while the thermometer indicates that it is not hot, or conversely, if the thermometer in- 

55 dicates that the temperature is hot while the thermocouple indicates that it is not hot, then a disagreement 
exists and procedure P5 is initiated requiring the operator to feel the oil pipe coming from the cooler and 
if it feels hot, to enter a 1 by operation of the keyboard and if it is not hot, to enter a -1, with the results 
appearing at tactile sensor node ts. 
The reading ts can be used as a check on the themiocoupie and thermometer. This third level backup 

60 uses rule r439 to map the confidence level in a hot oil condition into a conclusion of hot oil at node h442. 
If the oil in fact does feel hot, rule r443 linking this node with the validated hot oil conclusion at node 
h484 adds some evdence to this validation. 

Rule r442 at the extreme right of Figure 15B uses the thermocouple thermometer and tactile readings 
to determine whether or not the thermometer is actually defective. This determination is made using tunc- 

65 tions 406 to 408 which receive as input both the cold side and hot side conditions. If the thermocouple In- 
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dicates that the oil is coid and the thermometer indicates that the oil is hot while the tactile sensor indi- 
cates that the oil is not hot. then it is \\ke\y that the thermometer is in error as depicted at node m445. Sim- 
ilarly, if the thermocouple indicates that the oil is hot and the tactile sensor indication is that the oil Is hot 
while the thennometer indicates that the oil is not hot, a defective thennometer Is indicated. 

5 With the conclusion that the thennometer is defective, other rules involving a thennometer reading 
may now be modified to decrease their contribution in the detennination of a defective thermocouple at 
node m413. For example, using reading transforms rt400 and rt401, the difference between the thermom- 
eter reading and thennocouple reading is established at storage node stn400. Rule r444 examines the 
difference and if it is greater than for example 5 to 8 degrees, a high confidence in the difference is es- 

10 tablished at node h448. Since the probability of failure of a thermocouple is greater than that of a ther- 
mometer, mie r523 increases the confidence of a defective thermocouple at node m413. If, however, it 
has been determined at node m445 that the thermometer is defective, a parametric alteration rule pr419 
is operable to change the sufficiency of aile r523 to terminate the confidence in the difference so that it 
has no effect on the defective thermocouple determination. 

15 As a further example, rules r4097 and r441 in Rg. 15B utilize AND functions 410 and 411 to examine 
the three Indications of hot oil: the thermocouple reading, the thermometer reading and the tactile read- 
ing. If the thermocouple disagrees with the other two, then confidence in a defective thermocouple at 
node m413 is increased. If, however, the thennometer is defective, the necessity of these rules may be 
increased by a parametric alteration rule pr41 1 to reduce the belief in a defective thennocouple. 

20 FIG.16fA&B^ 

Rgures 16A and 16B illustrate possible abnomnal conditions which may be associated with the cooler 
54h, and particularly with the cooling water supply In pipes 55h and 56h. Again, the process is identical 
with respect to the air side cooler 54a with water pipes 55a and 56a using the respective sensors assod- 

25 ated with these components. 

Thennocouple readings are Input to sensor nodes TC2525 and TC2526 and are indicative of the cool- 
er inlet and outlet water temperatures respectively. Rule r588 converts the thermocouple reading of 
TC2525 into a confidence level, node h494, that the inlet water is coid while rule r587 converts the read- 
ing into a confidence level node h493, that the Inlet water is hot 

30 Reading transforms rt421 and rt422 provide the readings to storage node stn410 which determines 
the difference between the two temperature readings and mie r4150 (Rg. 16B) converts the difference 
readings into a confidence level that the differential temperature Is low, node h576. Rules r586 and rS83 
convert the results of the subtraction process into respective confidence levels that the differential 
temperature is high, node h492, and that the differential temperature is approximately zero, node h499. 

35 At storage node stn413, linked to the difference value by reading transfomn rt423, the rate of change 
of the differential temperature is detemiined. Rules r585 and r584 then convert the rate of change func- 
tion into a confidence level that the rate is fast, node h501, or conversely, that the rate is slow, node 
h500. 

From these established confidence levels, various conclusions may be reached, the simplest being at 
40 node m472 linked to node h493 by rule 590 and stating that there is a high Inlet water temperature. Rule 
r595, uses AND function 420 receiving as inputs the cold inlet water determination of node h494 and a 
cold hydrogen side oil detennination established by thennocouple TC 2520 to conclude that the hydrogen 
side sealing oil temperature is cold, node m474. However, it Is now established that the sealing oil tem- 
perature is due to the cold inlet water to the cooler. 
45 Similarly, rule rS94 uses AND function 422 to conclude that the hydrogen side sealing oil Is hot due to 
hot inlet cooUng water, node m471. Once the detennination has been made that the Inlet cooling water is 
hot, it is unnecessary to display the confidence level of node m472 and accordingly, parametric altera- 
tion rule pr424 eliminates the suffidency of rule rS90 to terminate propagation of the confidence level. 
If the hydrogen side oil is hot, and the difference between the inlet and outlet water temperatures is in- 
50 creasing at a fast rate, then rule 593 uses AND function 424 to convert this into a confidence level that 
there must be a restriction in the water flow circuit, node m470. This is particularly true if the differential 
temperature Is high, linked to the confidence level by rule r572. The restriction may be due to blockage 
such as an object, a bent tube, or a leak, for example, all of these tending to significantly reduce the wa- 
ter flow. 

55 If, however, the water tubes slowly become contaminated such as by algae buildup or the like, a differ- 
ential temperature will increase relatively slowly with time and rule r592, uses AND function 426 to con- 
vert the slow increase and the hot hydrogen side oil determination into a confidence level that the hot oil 
is due to tube fouling in the cooler, node m469. 
Under normal operating conditions, the temperature of the outlet cooler water should be greater than 

60 the temperature of the inlet cooler water to reflect the heat removed from the hydrogen side oil. If there 
is no differential temperature, and if the hydrogen side oil is hot, mIe r591 uses AND function 428 to 
conclude that there may be something wrong with the baffles within the cooler, node m468. In which case 
the hot oil would not be directed across the cooling coils properly. The cooler generally has a bypass 
valve (not illustrated In Rgure 2) and if this valve Is opened, the hot oil could be bypassing the cooler. 

65 This condition is also implied by node m468. 
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All of the abnormal conditions indicated at nodes ni468 to m471 provide reasons for the hydrogen side 
sealing oil to be hot. Rule r596 uses OR function 430 to conclude that the reason for the hot oil is known, 
node h459. Using AND function 432 of rule 589, if no reason is known for the oil being hot and it is in- 
deed hot, it is concluded that since none of the previously described reasons are present, the hot oil 
5 must be due to an inadequate water flow in the cooler, node m473. This conclusion is additionally support- 
ed by rule r4149 if the differential temperature between the inlet and outlet water Is high. 

If it Is concluded that there is low water flow, a procedure P6 is indicated to the operator to increase 
the flow of water to the cooler and when that is done, a 1 is entered through operation of the keyboard in- 
to node hswfi indicating that the hydrogen side water flow has been increased. Rule r4106 maps this val- 
10 ue into a confidence level that the flow has been increased, node h563. Rule r4134 which would have a 
negative sufficiency factor would subtract from the confidence level in the low water flow conclusion of 
m473. 

Fig 17 (A a ^) 

15 

Rgures 17A and 17B illustrate various conditions relating to the valves on drain regulator 64 and the 
pressure equalizing valves 210 and 217. 

During normal operation, the pressure equalling valves 210 and 217 should operate to make the hy- 
drogen side oil pressure equal to the air side oil pressure, if one pressure is greater than the other, 

20 more or less oil will flow into the defoaming tanks, the results of which are seen in the drain regulator 
tank 64. if too much oil is deposited in the defoaming tanks, the oil level in the drain regulator will rise 
thereby opening drain valve 231 to compensate, in which case sensor DRD63 provides an output signal 
indicative of the open condition of the valve. If tiiere is less than normal flow into the drain regulator, fill 
valve 232 will be opened such that sensor DRFXD provides an output signal Indicative of the open con- 

25 dition of the valve. 

Rule r4113 in Fig. 17A uses logic functions 440 to 442 to conclude, at node h566, that either the drain 
valve 231 is open and the feed valve 232 is closed, or conversely, that the feed valve is open and the 
drain valve is closed. If either is the case, then one or both of the pressure equalizing valves 210 and 
217 are probably defective, this conclusion at node m490 being reached by means of mle r4120. If the 
30 air side oil Is entering the hydrogen side defoaming tanks, the air can find Its way into the generator 
housing and a low hydrogen purity indication provided by rule r4112 would additionally support the defec- 
tive valve conclusion. 

The existence of the defective valve indication functions to signal the operator to initiate procedure 
P7 whereby the pressure differential gauges ga4610 and ga4830 are to be read and their values en- 

35 tered into the system. With pressure equalizing valves 210 . and 217 operating properiy, the hydrogen 
side and air side oil pressures should be equal and the gauges, providing an indication of the pressure 
difference, should therefore read zero. Rules r4116 and r4118 (Rg. 17B) convert the respective gauge 
readings into a conclusion, at nodes h564 and h565 that the readings are other than zero. This conclu- 
sion is presented to AND function 444 of rule r4115, to AND function 445 of rule r4119, to AND func- 

40 Hon 446 of rule r41 1 7 and to AND function 447 of rule r41 14. 

For rule r4115, gauge ga4610 does not read zero, while gauge ga4630 does (l.e. the negation of does 
not read zero). Accordingly, these two factors lead to the conclusion at node m492 that valve 210, to 
which gauge ga4610 is connected, is defective or out of adjustment. This determinatton, however, is vat- 
id only if the hydrogen side pump is running and, accordingly, the evidence of node m400 is included in 

45 the determination. 

Rule r4119, at node m494, an'ives at the same conclusion with respect to valve 217 using similar evi- 
dence. If both valves happen to be defective, and the hydrogen side pump is still operating, rule r4117 
will convert this input into the conclusion that both valves are defective or out of adjustment, node m493. 

If one of the drain or feed valves, 231 and 232 respectively, is open and the other closed, or vice ver- 
50 sa, but both differential pressure gauges are zero, then it is likely that the fault lies with the drain or 
feed valves 231 or 232, node m491. This scenario is depicted by rule r4114 using AND function 447. 

Thus, if it has been determined that one or both valves are defective, then the need to display the gen- 
eral observation of defective pressure regulating valves provided at node m490 (Rg. 17A) is no longer 
desired. Accordingly, propagation of this conclusion may be terminated by changing the sufficiency of 
55 rule r4120 by means of a parametric alteration rule modification. This may be accomplished in one embodi- 
ment by having nodes m491 to m494 generate indivMual parametric alteration rules for changing the suf- 
ficiency. Aitematively, and as Indicated in Rgure 17B, mle r4121 can combine all of the outputs of nodes 
m491 to m494 using OR function 450 to conclude that the defective valve or valves are known, node 
h575, in which case parametric alteration rule pr4920 operates on mle r4120 to effectively cut off prop- 
60 agation of the conclusion of node m490. 

Accordingly, there has been, described a diagnostic system for arriving at certain conclusions rela- 
tive to the operating condition of a gas cooled electric generator sealing oil system while the generator 
and sealing oil system are on-line. The abnormal conditions described by way of example are representa- 
tive of many conditions which may be diagnosed and presented to an operator with various degrees of 
65 confidence so that proper corrective action. If needed, may be taken. 
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Various illustrations have been given of the validation of conclusions resulting from sensor readings. 
In general, such validation would be desirable for the majority of sensor readings and would be per- 
formed using one or more of the techniques described herein. 



10 



15 



20 



25 



30 



40 



45 



50 



55 



60 



65 



18 



EP0229719B1 



APPENDIX A 



10 



15 



20 



25 



30 



35 



40 



45 



50 



55 



60 



Hypothesis 
Number 



h400 



h401 



h4Q2 



h403 



h404 



h405 



h406 



h407 



h409 



h410 



h413 



h414 



Brief Explanation 

Hydrogen side pump 50h 
is off. 

High* air side oil pressure 
on the- exciter end accord- 
ing to gauge ga4610. 

High air side oil pressure 
on the turbine end accord- 
ing to gauge ga4610. 

The oil pressure as read by 
gauge ga4650 is approximately 
equal to the hydrogen gas pres- 
sure. 

Air side pump 50a is off 
(validated). 

The oil pressure at the 
output of the air side pump 
is low according to gauge 
ga4640; 

The oil pressure at the 
output of the air side 
pump is normal according to 
gauge ga4640. 

The oil pressure in the air 
side line delivering oil to 
the gland seals is low 
according to gauge ga4620. 

The hydrogen side pump 50h 
is off (validated).. 

The turbine backup pressure 
is low according to switch 
SOB63 . 

The oil level in drain 
regulator 64 is low accord- 
ing to sensor DRT71. 

The oil level is high in the 
. turbine end defoaming tank 62 
.according to sensor DTT71. 



Figure in 
Which First 
Derived 

•7A 
7B 



7B 
7B 

8A 
8B 

8B 

8B 

7A 
8A 
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h4.16 
h4l7 
h418 
h419 
h420 
h428 
h432 



h434 



h438 



h441 



}i442 

h44& 
h448 



The hydrogen side .oil is cold . ISA 

according to. sensor TC2520. 

The hydrogen side oil is cold ISA 
according to thermometer tm520. 

First validation of cold * ISA 
hydrogen side oil. 

First validation of hot ISA 
hydrogen side oil.- 

The hydrogen side oil is hot . ISA 

according to sensor TC2520, 

Neither the hydrogen side oil 14 
nor air side -oil is hot. 

The differential pressure 11 
between the air side 
supplied oil and the hydrogen 
pressure is approximately 5 psi 
according to differential 
: pressure sensor ASOHXD. 

The differential pressure 11 
between the air side 
supplied oil arid the hydrogen 
pressure is between 8 and 12 
psi according to differential 
pressure sensor ASOHXD. 

The differential pressure .11 
between the air side 
supplied oil and the hydrogen 
pressure is high according to 
differential pressure sensor 
ASOHXD. 

There is disagreement between 15B 
the readings of thermocouple. 
TC2S20 and thermometer tm520.in 
determining whether the 
hydrogen* side oil temperature 
is hot. 

The hydrogen side oil is hot 15B 
according to an operator who 
has felt the oil delivery pipe* 



Thermocouple TC2S20 is out of* ISA 
range . 

.The thermocouple TC2520 and ISA 
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h450 
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h453 



h454 



h455 



h457 



h4S9 



h460 



h451 



h462 



h464 



h465 



h468 



thermometer tm520 readings do 
not agree. 

The differential pressure 12 
derived from the .exciter end 
oil pressure sensor -ASOEXD and 
a hydrogen pressure transducer 
is between 5 and 8 psi. 

Feed valve 232 at the drain 9 
regulator 64 is open according 
to sensor DRFXD- 

Drain valve 231 draining oil 9 
from drain regulator 64 is open 
according to sensor DRD63. 

Oil is backing up out of the 9 
drain regulator 64 as determined 
by sensor DRI71- 

, The differential pressure 12 
derived from the exciter end 
oil pressure sensor- ASOEXD and 
a hydrogen pressure transducer 
is between 8 and 12 psi. 

The hydrogen side oil is hot 16B 
and the reason for its being 
hot is known. 

There is high air side pressure 7B 
at tha exciter and turbine ends 
as determined by gauges ga4610 
and ga4630. 

The differential pressure across 7A 
the hydrogen side filter 58h is 
high according to sensor HSOFXD. 

The differential pressure across 13 
the- air side filter 58a is high 
according to' sensor HSOFXD. 

The oil level in drain regulator 9 
64 is high according to sensor 
. olg. 

Feed valve 232 for drain . 9 

regulator 64 is open while drain 
' valve 231 is closed. 

Indicates a suspicious 9B 
condition at the drain regul- 
lator according to levels and 
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h469 



h472 



h474 



h478 



h479 



h480' 



h483 



h484 



h490 



h492 



h493 



open or closed conditions of 
feed and drain valves. 

The drain valve 231 and feed 9 
valve 232 of drain regulator 
are both open. 

The oil level in the exciter 10 
end defoaming tank 60e is high 
according to sensor DTE71. 

A significant difference 12 
exists between the exciter end 
air side pressure sensor ASOEXD 
and turbine end sensor ASOTXD. 

The differential* pressure .12 - 

derived from the exciter end 
oil pressure sensor ASOEXD and 
a hydrogen pressure transducer 
is less than 0 psl. 

The differential pressure 12 
derived from the exciter end 
oil pressure sensor ASOEXD and 
a hydrogen pressure transducer 
is approximately -5 psi • 

The rate of change of the 12 
exciter end differential pres- 
sure is ' decreasing. 

The hydrogen side oil is cold 15 A 

according to thermocouple TC2520 
• (second validation). 

The hydrogen side oil is hot 15A 
according to thermocouple TC2520 
(second validation). 

A significant difference exists ISA 
between the thermocouple TC2520 
measuring the temperature* of the 
hydrogen side oil and thermocouple ' 
TC2510 measuring the temperature 
of the air side oil. 

The difference in temperature 16B 
between the outlet and inlet 
cooling water for cooler 54h as 
measured by thermocouples TC2526 * 
and .TC2525 is high. 

The inlet water to cooler 54h jas 16A 
measured by thermocouple TC2525 
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is hot. 



h494 



h499 
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hSOO 



hSOl 



h502 
h503 
li504 

hSOS 
h506 



h509 



hSlO 



The inlet water to cooler 54h as 16A 
measured by thermocouple TC2525 
is cold. 

The difference in temperature • 16B 

between the outlet and inlet 
cooling water for cooler 54h as 
measured by thermocouples TC2526 
and TC2525 is approximately 0- 

The differential temperature 16B 
between the outlet and inlet 
cooling -water to cooler 54h as 
measured by thermocouples TC2525 
and TC2525 is slowly increasing 
with time. 

The differential temperature 16A 
between the outlet and inlet 
cooling water to cooler 54h as 
measured by thermocouples. TC252 6 
and TC2525 is .rapidly increasing 
with time. 

The purity of the hydrogen within 14 
the generator housing is low. 

There is high humidity within 14 
the generator housing. 

There is an oil leak at the 14 
exciter end or turbine end of . 
the -generator . 

Oil has entered .the generator 14 
housing but the oil is not hot. 

There is disagreement between 8A 
the exciter and turbine end 
pressure sensors ASOEXD and 
ASOTXD however the sensed pres- 
sure compared with the hydrogen 
pressure is approximately 8 psi. 

The rate of change of the 12 
turbine end differential pres- 
sure is decreasing. 

The rate of change of the 11 
differential pressure as 
measured by sensor ASOHXD is 
negative . 
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Mil . me umm aummki 

pressure measured, by either 
ASOEXD or ASOTXD is approxi- 
mately 8 psi, 

hS13 The differential pressure 

across the hydrogen side 
filter 58h is approximately 
0 as measured by sensor 
HSOFXD. 

h518 A disagreement exists since 

the differential pressure 
across the hydrogen side filter 
58h and' the hydrogen side 
cooler water differential 
temperature indicates a condi- 
tion opposite to that indicated 
by sensor KS063 across hydrogen 
side pump 50h. 

h520 A problem exists in the exciter • 

end according to gauges ga4610 
and ga4630. 

h522 There is agreement between 

the exciter and turbine end' 
pressure sensors ASOEXD and 
ASOTXD however the sensed pres- 
sure compared with the hydrogen 
pressure is approximately 8 psi. 

h523 . A disagreement exists because 

-pressure conditions as measured 
by the exciter and turbine end sen 
sors ASOEXD and ASOTXD indicate a 
contrary condition of the air "side 
pump 50a as indicated by sensor 
AS063. 

h525 The oil level in the exciter 

end defo'aming tank is high and 
the oil is hot. 

h527 The oil level in the turbine 

end defoaming tank 6ot is high 
and the oil is hot. 

h531 The differential pressure as 

measured by sensor ASOHXD is 
less than 5 psi. 

h535 The differential pressure 

■ derived from the exciter end • 
oil pressure sensor ASOEXD and 
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a hydrogen pressure transducer 
is approximately 8 psi. 

The differential pressure 
derived from the exciter end 
oil pressure sensor ASOEXD and 
a hydrogen pressure transducer 
is between 0 and 5 psi. 

The differential pressure 
derived from the turbine end 
oil pressure sensor ASOTXD and 
a hydrogen pressure transducer 
is approximately 12 psi. 

The differential pressure 
derived from the turbine end 
oil pressure sensor ASOTXD and 
a hydrogen pressure transducer 
is between 8 and 12 psi. 

The differential pressure 
derived from the turbine end 
oil pressure sensor ASOTXD and 
a hydrogen pressure transducer 
is approximately 8 psi. 

The differential pressure 
derived from the turbine end 

011 pressure sensor ASOTXD and 
a hydrogen pressure transducer 
is between 5 and 8 psi. 

The differential pressure at 
the. exciter end is less than 

12 psi. 

The differential pressure at 
the exciter end is less than 
8 psi.' 

The hydrogen side oil is hot 
according to thermometer tm520. 

The flow of water to the 
hydrogen side of the cooler 54h 
has been increased. 

The differential pressure gauge 
ga46I0 at the exciter end does 
not read zero. 

The differential pressure gauge 
ga4630 at the turbine end does 
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not read serot 

h566 Either the drain valve 231 is 17 

5 open and feed valve 232 is closed 

or vise versa*. 

h567 . The hydrogen side pump 50h is 7B 

10 off according to gauge readings. 

h568 The difference between the air 8A 

side oil and hydrogen pressure 
is less than 8 psi* 

h569 The air side pump 50a is off 8A 

according to sensor AS053 • 

20 

h570 The oil level in both the 10 

exciter and turbine end def earning 
tanks 60e and 60t is high 
according to sensors DTE71 and 
. PTT71. 
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h575 One or more defective valves of. 17 

the group including drain and 
30 feed valves 231 and 232 and 

pressure regulating valves 210 
and 217 is known. 

35 h576. The difference in temperature 16B 

• between the outlet and inlet 
cooling water for cooler 54h as 
measured by thermocouples TC2526 

40 and TC2525 is low. 



Claims 

45 

1« Diagnostic apparatus for a multi-component gas-cooled electric generator seal oil system (20) 
wherein the generator shaft (18) is sealed against the escape of the cooling gas by means of spaced- 
apart gland seals (44e, 44t) and wherein sealing oil is supplied to the gland seats, of the type comprising: 
a plurality of sensors connected to sense predetermined operating parameters of said seal oil system, 
50 while on-line, and to provide respective conBsponding output signals; characterized by: 

computer means (22) including a rule base memory for diagnosing the on-line operating condition of said 
seal oil system (20); 

said rule base including rules (104 - Figure 4) linking a preceding evidence node (100) with a consequent 
hypothesis node (102); 
55 a plurality of said evidence nodes constituting sensor nodes; 

said apparatus including means for inputting said on-line sensor signals into said sensor nodes; 
means (28) for additionally inputting operator generated values into selected ones of said sensor nodes. 

2. Apparatus according to daim 1 which includes: 

at least one thermometer (tm 51 0, 520) connected to provide a reading of seal oil temperature; wherein 
60 said operator generated value is the temperature reading of said thermometer. 

3. Apparatus according to daim 1 which Includes: 

at least one pressure gauge (ga 4610, 4620 ... 4650) connected to provide a reading of seal oil pres- 
sure; wherein 

said operator generated value is the pressure reading of said pressure gauge. 

65 
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PatentansprQche 

1. Fehlersuchgerat fur ein Mehrfachkomponenten-Dichtdlsystem eines gasgekOhlten elektrischen 
Generators, worin die Generatorwelle (18) gegen Austreten von Kuhlgas durch im Abstand angeordnete 

5 Spritzdichtungen (44e, 441) verschlossen wird und worin Dichtdl durch die Spritzdichtungen zugefuhrt 
wird, wobei eine Vielzahl von Sensoren angeschlossen sind, um vorbestimmte Bedienungsparameter des 
Dichtdlsystems zu fOhlen, wdhrend on-line, und um entsprechende einschldglge Ausgangssignale zu lie- 
fern, dadurch gekennzeichnet, daB 

eine Computereinrichtung (22) vorgeseinen 1st, die einen Linienbasisspelcher zur Diagnose der on-iine 
10 Arbeitsbedingungen des Dichtdlsystems (20) aufweist; 

diese Linienbasis (104, Figur 4) mit Linlen versehen 1st, die einen vorfiergehenden Nacliweis-Khoten- 

punkt (100) mit einem foigenden IHypothese-Knotenpunkt (102) verbinden; 

eine Vielzahl der Nachweis-Knotenpunkte, die Sensor-Knotenpunkte bilden; 

das GerSt Mittel zum EIngeben der on-line Sensorsignale in die Sensor-Knotenpunkte aufweist; 
15 Mittel (28), zum zusactzllchen Bngeben von durch die Bedienungsperson geschaffenen Werten in einen 

ausgew&hlten der Sensor-Knotenpunkte, vorgesehen sind 

2. Gerat nach Anspruch 1, dadurch gekennzeichnet, daB 

mindestens ein Thermometer (tm 510, 520) angeschlossen ist, um eine Anzelge der Dichtdltemperatur zu 
liefem; wobei der durch die Bedienungsperson geschaffene Wert die Temperaturanzeige des Thermo- 
20 meters ist 

3. Gerat nach Anspruch 1 , dadurch gekennzeichnet, daB 

mindestens ein Druckmesser (ga 4610, 4620, ... 4650) angeschlossen ist, um eine Anzeige des Dicht- 
didruckes zu liefem; 

wobei der von der Bedienungsperson geschaffene Wert die Druckanzeige des Dfuckmessers ist 

25 

Revendications 

1. Appareil de diagnostic pour systeme (20) k huile d'etancheite multi-6l6ments pour g§n6rateur 6iectri- 
que refroidi par gaz, dans lequei I'abre (18) du g^ndrateur est rendu Blanche k I'aide de gamrtures 
30 d'^tanch^tt^ (44e k 44t) espacees les unes des autres pour empecher te gaz de refroidissement de 
s'tehapper, et dans lequei Thulle d'^tanch^it^ est foumie aux garnitures d'^tanch^It^, du type oompre- 
nant: 

une plurality de capteurs mont§ pour ddtecter des param^tres de fonctionnement preddterminds dudit 
systdme d'huile d'6tanch§it6 pendant qu'il est en sen^lce, et pour foumir des signaux de sortie respec- 
35 tifs correspondants; caract6ris6 par: 

un moyen formant calculateur (22) comportant une m^moire k base de regies pour diagnostiquer Tdtat de 
fonctionnement en service dudit systdme (20) a huile d'^tanch^it^; 

iadite base de regies comportant des r^les (104 - Rgure 4) liant un noeud prteddent de mise en Eviden- 
ce (100) k un noBud resultant d'hypoth^se (101); 
40 une plurallt6 desdits noeuds d*6videnoe constltuant des nceuds de capteurs; 

ledtt appareil comportant un moyen pour ^e entrer dans lesdits noeuds de capteurs lesdits signaux de 
capteurs en service; 

un moyen (28) pour introdulre en outre dans certains desdits noeuds de capteurs choisis des valeurs 
produites par un opdrateur. 
45 2. Appareil selon la revendication 1 , comprenant: 

au moins un thermom^tre (tm 510, 520) montd pour foumir une Indication de la temperature de Thuile 
d'^tanchditE; dans lequei 

Iadite valeur produite par Top^rateur est ia temperature indiquee par ledit thermom^tre. 
3. Appareil selon la revendication 1 , qui comprend: 
50 au moins un manom^tre (ga 4610, 4620 ... 4650) montS pour fournir une indication de la pression de I'huile 
d'6tanch6it6; dans lequei 

Iadite valeur produite par i'operateur est la pression indiquee par ledit manomdtre. 
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